[PATCH AUTOSEL for 4.4 27/32] zram: set physical queue limits to avoid array out of bounds accesses

2017-11-29 Thread alexander . levin
From: Johannes Thumshirn [ Upstream commit 0bc315381fe9ed9fb91db8b0e82171b645ac008f ] zram can handle at most SECTORS_PER_PAGE sectors in a bio's bvec. When using the NVMe over Fabrics loopback target which potentially sends a huge bulk of pages attached to the bio's bvec this results in a kerne

Re: [PATCH] jsm_tty: Fix a possible null pointer dereference in two functions

2017-11-29 Thread Greg Kroah-Hartman
On Wed, Nov 29, 2017 at 09:23:07AM -0800, Joe Perches wrote: > On Wed, 2017-11-29 at 17:40 +0100, SF Markus Elfring wrote: > > From: Markus Elfring > > Date: Wed, 29 Nov 2017 17:30:36 +0100 > > > > Move two debug messages so that a null pointer access can not happen > > for the variable "ch" in t

[PATCH AUTOSEL for 4.4 24/32] ipv6: reorder icmpv6_init() and ip6_mr_init()

2017-11-29 Thread alexander . levin
From: WANG Cong [ Upstream commit 15e668070a64bb97f102ad9cf3bccbca0545cda8 ] Andrey reported the following kernel crash: kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linke

[PATCH AUTOSEL for 4.4 25/32] crypto: s5p-sss - Fix completing crypto request in IRQ handler

2017-11-29 Thread alexander . levin
From: Krzysztof Kozlowski [ Upstream commit 07de4bc88ce6a4d898cad9aa4c99c1df7e87702d ] In a regular interrupt handler driver was finishing the crypt/decrypt request by calling complete on crypto request. This is disallowed since converting to skcipher in commit b286d8b1a690 ("crypto: skcipher -

[PATCH AUTOSEL for 4.4 14/32] workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq

2017-11-29 Thread alexander . levin
From: Tejun Heo [ Upstream commit 637fdbae60d6cb9f6e963c1079d7e0445c86ff7d ] If queue_delayed_work() gets called with NULL @wq, the kernel will oops asynchronuosly on timer expiration which isn't too helpful in tracking down the offender. This actually happened with smc. __queue_delayed_work()

Re: [PATCH v2 1/2] pinctrl: Allow a device to indicate when to force a state

2017-11-29 Thread Florian Fainelli
On 11/29/2017 09:01 AM, Tony Lindgren wrote: > * Florian Fainelli [171102 23:18]: >> It may happen that a device needs to force applying a state, e.g: >> because it only defines one state of pin states (default) but loses >> power/register contents when entering low power modes. Add a >> pinctrl_d

Re: [PATCH V2 1/7] PCI: protect restore with device lock to be consistent

2017-11-29 Thread Christoph Hellwig
On Mon, Nov 27, 2017 at 01:20:22AM -0500, Sinan Kaya wrote: > Commit b014e96d1abb ("PCI: Protect pci_error_handlers->reset_notify() usage > with device_lock()") added protection around pci_dev_restore() function so > that device specific remove callback does not cause a race condition > against hot

[PATCH AUTOSEL for 4.4 23/32] bnx2x: do not rollback VF MAC/VLAN filters we did not configure

2017-11-29 Thread alexander . levin
From: Michal Schmidt [ Upstream commit 78d5505432436516456c12abbe705ec8dee7ee2b ] On failure to configure a VF MAC/VLAN filter we should not attempt to rollback filters that we failed to configure with -EEXIST. Signed-off-by: Michal Schmidt Signed-off-by: David S. Miller Signed-off-by: Sasha

Re: [PATCH V2 2/7] PCI: handle FLR failure and allow other reset types

2017-11-29 Thread Christoph Hellwig
On Mon, Nov 27, 2017 at 01:20:23AM -0500, Sinan Kaya wrote: > pci_flr_wait() and pci_af_flr() functions assume graceful return even > though the device is inaccessible under error conditions. > > Return -ENOTTY in error cases so that __pci_reset_function_locked() can > try other reset types if AF_

[PATCH AUTOSEL for 4.4 22/32] bnx2x: fix possible overrun of VFPF multicast addresses array

2017-11-29 Thread alexander . levin
From: Michal Schmidt [ Upstream commit 22118d861cec5da6ed525aaf12a3de9bfeffc58f ] It is too late to check for the limit of the number of VF multicast addresses after they have already been copied to the req->multicast[] array, possibly overflowing it. Do the check before copying. Also fix the

[PATCH AUTOSEL for 4.4 21/32] bnx2x: prevent crash when accessing PTP with interface down

2017-11-29 Thread alexander . levin
From: Michal Schmidt [ Upstream commit 466e8bf10ac104d96e1ea813e8126e11cb72ea20 ] It is possible to crash the kernel by accessing a PTP device while its associated bnx2x interface is down. Before the interface is brought up, the timecounter is not initialized, so accessing it results in NULL der

[PATCH AUTOSEL for 4.4 19/32] arm64: KVM: Survive unknown traps from guests

2017-11-29 Thread alexander . levin
From: Mark Rutland [ Upstream commit ba4dd156eabdca93501d92a980ba27fa5f4bbd27 ] Currently we BUG() if we see an ESR_EL2.EC value we don't recognise. As configurable disables/enables are added to the architecture (controlled by RES1/RES0 bits respectively), with associated synchronous exceptions,

Re: [PATCH V2 4/7] PCI: wait device ready after pci_pm_reset()

2017-11-29 Thread Christoph Hellwig
Looks good, Reviewed-by: Christoph Hellwig

Re: [PATCH V2 3/7] PCI: make pci_flr_wait() generic and rename to pci_dev_wait()

2017-11-29 Thread Christoph Hellwig
On Mon, Nov 27, 2017 at 01:20:24AM -0500, Sinan Kaya wrote: > Rev 3.1 Sec 2.3.1 Request Handling Rules: > Valid reset conditions after which a device is permitted to return CRS > are: > * Cold, Warm, and Hot Resets, > * FLR > * A reset initiated in response to a D3hot to D0 uninitialized > > Try t

Re: [PATCH v2 2/2] pinctrl: Allow indicating loss of pin states during low-power

2017-11-29 Thread Florian Fainelli
On 11/29/2017 09:02 AM, Tony Lindgren wrote: > * Linus Walleij [171129 13:03]: >> On Fri, Nov 3, 2017 at 12:15 AM, Florian Fainelli >> wrote: >> >>> Some platforms (e.g: Broadcom STB: BMIPS_GENERIC/ARCH_BRCMSTB) will lose >>> their register contents when entering their lower power state. In such

Re: [PATCH V2 5/7] PCI: add a return type for pci_reset_bridge_secondary_bus()

2017-11-29 Thread Christoph Hellwig
On Mon, Nov 27, 2017 at 01:20:26AM -0500, Sinan Kaya wrote: > Getting ready to return an error from pci_reset_bridge_secondary_bus() when > device is unreachable. > > Signed-off-by: Sinan Kaya Looks ok, but I would just merge it into the next patch. Reviewed-by: Christoph Hellwig

Re: [PATCH V2 6/7] PCI: add device wait after slot and bus reset

2017-11-29 Thread Christoph Hellwig
On Mon, Nov 27, 2017 at 01:20:27AM -0500, Sinan Kaya wrote: > Rev 3.1 Sec 2.3.1 Request Handling Rules indicates that a device can issue > CRS following secondary bus reset. Handle device presence gracefully. > > Signed-off-by: Sinan Kaya Looks good, Reviewed-by: Christoph Hellwig

Re: [v2,01/12] hwrng: bcm2835 - Obtain base register via resource

2017-11-29 Thread Florian Fainelli
On 11/28/2017 10:30 PM, Herbert Xu wrote: > On Tue, Nov 07, 2017 at 04:44:38PM -0800, Florian Fainelli wrote: >> In preparation for consolidating bcm63xx-rng into bcm2835-rng, make sure >> that we obtain the base register via platform_get_resource() since we >> need to support the non-DT enabled MI

Re: [PATCH 1/3] kbuild: add clang-version.sh

2017-11-29 Thread Nick Desaulniers
+# clang-version [-p] clang-command +# +# Prints the compiler version of `command' in a canonical 4-digit form small nit: `command` should be `clang-command`, but its just a comment (maybe the maintainer can make that change when/if applying). The conditional at the end to see if $with_patchlevel

Re: [PATCH] jsm_tty: Fix a possible null pointer dereference in two functions

2017-11-29 Thread Joe Perches
On Wed, 2017-11-29 at 17:40 +0100, SF Markus Elfring wrote: > From: Markus Elfring > Date: Wed, 29 Nov 2017 17:30:36 +0100 > > Move two debug messages so that a null pointer access can not happen > for the variable "ch" in these functions. An actual defect fix! Here you could probably cc stable

[PATCH AUTOSEL for 4.4 06/32] ARM: OMAP2+: Fix device node reference counts

2017-11-29 Thread alexander . levin
From: Guenter Roeck [ Upstream commit 10e5778f54765c96fe0c8f104b7a030e5b35bc72 ] After commit 0549bde0fcb1 ("of: fix of_node leak caused in of_find_node_opts_by_path"), the following error may be reported when running omap images. OF: ERROR: Bad of_node_put() on /ocp@6800 CPU: 0 PID: 0 Comm

Re: [Xen-devel] [PATCH V2] Xen/pciback: Implement PCI slot or bus reset with 'do_flr' SysFS attribute

2017-11-29 Thread Govinda Tatti
In the case of bus or slot reset, our goal is to reset connected PCIe fabric/card/endpoint. The connected card/endpoint can be multi-function device. So, same walk-through and checking is needed irrespective of type of reset being used. I don't follow: The scope of other devices/functions possi

[PATCH AUTOSEL for 4.4 13/32] libata: drop WARN from protocol error in ata_sff_qc_issue()

2017-11-29 Thread alexander . levin
From: Tejun Heo [ Upstream commit 0580b762a4d6b70817476b90042813f8573283fa ] ata_sff_qc_issue() expects upper layers to never issue commands on a command protocol that it doesn't implement. While the assumption holds fine with the usual IO path, nothing filters based on the command protocol in

[PATCH AUTOSEL for 4.4 03/32] x86/hpet: Prevent might sleep splat on resume

2017-11-29 Thread alexander . levin
From: Thomas Gleixner [ Upstream commit bb1a2c26165640ba2cbcfe06c81e9f9d6db4e643 ] Sergey reported a might sleep warning triggered from the hpet resume path. It's caused by the call to disable_irq() from interrupt disabled context. The problem with the low level resume code is that it is not ac

[PATCH AUTOSEL for 4.4 08/32] gpio: altera: Use handle_level_irq when configured as a level_high

2017-11-29 Thread alexander . levin
From: Phil Reid [ Upstream commit f759921cfbf4847319d197a6ed7c9534d593f8bc ] When a threaded irq handler is chained attached to one of the gpio pins when configure for level irq the altera_gpio_irq_leveL_high_handler does not mask the interrupt while being handled by the chained irq. This result

[PATCH AUTOSEL for 4.4 07/32] ARM: OMAP2+: Release device node after it is no longer needed.

2017-11-29 Thread alexander . levin
From: Guenter Roeck [ Upstream commit b92675d998a9fa37fe9e0e35053a95b4a23c158b ] The device node returned by of_find_node_by_name() needs to be released after it is no longer needed to avoid a device node leak. Signed-off-by: Guenter Roeck Signed-off-by: Tony Lindgren Signed-off-by: Sasha Lev

[PATCH AUTOSEL for 4.9 31/52] arm: KVM: Survive unknown traps from guests

2017-11-29 Thread alexander . levin
From: Mark Rutland [ Upstream commit f050fe7a9164945dd1c28be05bf00e8cfb082ccf ] Currently we BUG() if we see a HSR.EC value we don't recognise. As configurable disables/enables are added to the architecture (controlled by RES1/RES0 bits respectively), with associated synchronous exceptions, it m

[PATCH AUTOSEL for 4.4 04/32] selftest/powerpc: Fix false failures for skipped tests

2017-11-29 Thread alexander . levin
From: Sachin Sant [ Upstream commit a6d8a21596df041f36f4c2ccc260c459e3e851f1 ] Tests under alignment subdirectory are skipped when executed on previous generation hardware, but harness still marks them as failed. test: test_copy_unaligned tags: git_version:unknown [SKIP] Test skipped on l

[PATCH AUTOSEL for 4.9 35/52] spi_ks8995: regs_size incorrect for some devices

2017-11-29 Thread alexander . levin
From: "Blomme, Maarten" [ Upstream commit 239870f2a0ebf75cc8f6d987dc528c5243f93d69 ] Signed-off-by: Maarten Blomme Signed-off-by: David S. Miller Signed-off-by: Sasha Levin --- drivers/net/phy/spi_ks8995.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/net/phy/sp

[PATCH AUTOSEL for 4.9 30/52] KVM: nVMX: reset nested_run_pending if the vCPU is going to be reset

2017-11-29 Thread alexander . levin
From: Wanpeng Li [ Upstream commit 2f707d97982286b307ef2a9b034e19aabc1abb56 ] Reported by syzkaller: WARNING: CPU: 1 PID: 27742 at arch/x86/kvm/vmx.c:11029 nested_vmx_vmexit+0x5c35/0x74d0 arch/x86/kvm/vmx.c:11029 CPU: 1 PID: 27742 Comm: a.out Not tainted 4.10.0+ #229 Hardware na

Re: [PATCH AUTOSEL for 4.9 04/52] x86/selftests: Add clobbers for int80 on x86_64

2017-11-29 Thread Dmitry Safonov
Hi Sasha, I would object including this to stable tree: 1. It's selftest fixup 2. I have never saw selftests failing because of it (but it's possible) I saw this in CRIU (Checkpoint Restore In Userspace) project triggering, so I've fixed the selftests, mostly for documentation reasons

[PATCH AUTOSEL for 4.9 41/52] ibmvnic: Fix overflowing firmware/hardware TX queue

2017-11-29 Thread alexander . levin
From: Thomas Falcon [ Upstream commit 142c0ac445792c492579cb01f1cfd4e32e6dfcce ] Use a counter to track the number of outstanding transmissions sent that have not received completions. If the counter reaches the maximum number of queue entries, stop transmissions on that queue. As we receive mor

[PATCH AUTOSEL for 4.9 48/52] netfilter: don't track fragmented packets

2017-11-29 Thread alexander . levin
From: Florian Westphal [ Upstream commit 7b4fdf77a450ec0fdcb2f677b080ddbf2c186544 ] Andrey reports syzkaller splat caused by NF_CT_ASSERT(!ip_is_fragment(ip_hdr(skb))); in ipv4 nat. But this assertion (and the comment) are wrong, this function does see fragments when IP_NODEFRAG setsockopt is

[PATCH AUTOSEL for 4.9 52/52] EDAC, i5000, i5400: Fix use of MTR_DRAM_WIDTH macro

2017-11-29 Thread alexander . levin
From: Jérémy Lefaure [ Upstream commit e61555c29c28a4a3b6ba6207f4a0883ee236004d ] The MTR_DRAM_WIDTH macro returns the data width. It is sometimes used as if it returned a boolean true if the width if 8. Fix the tests where MTR_DRAM_WIDTH is misused. Signed-off-by: Jérémy Lefaure Cc: linux-eda

[PATCH AUTOSEL for 4.9 49/52] axonram: Fix gendisk handling

2017-11-29 Thread alexander . levin
From: Jan Kara [ Upstream commit 672a2c87c83649fb0167202342ce85af9a3b4f1c ] It is invalid to call del_gendisk() when disk->queue is NULL. Fix error handling in axon_ram_probe() to avoid doing that. Also del_gendisk() does not drop a reference to gendisk allocated by alloc_disk(). That has to be

[PATCH AUTOSEL for 4.9 47/52] zram: set physical queue limits to avoid array out of bounds accesses

2017-11-29 Thread alexander . levin
From: Johannes Thumshirn [ Upstream commit 0bc315381fe9ed9fb91db8b0e82171b645ac008f ] zram can handle at most SECTORS_PER_PAGE sectors in a bio's bvec. When using the NVMe over Fabrics loopback target which potentially sends a huge bulk of pages attached to the bio's bvec this results in a kerne

[PATCH AUTOSEL for 4.4 01/32] vti6: Don't report path MTU below IPV6_MIN_MTU.

2017-11-29 Thread alexander . levin
From: Steffen Klassert [ Upstream commit e3dc847a5f85b43ee2bfc8eae407a7e383483228 ] In vti6_xmit(), the check for IPV6_MIN_MTU before we send a ICMPV6_PKT_TOOBIG message is missing. So we might report a PMTU below 1280. Fix this by adding the required check. Fixes: ccd740cbc6e ("vti6: Add pmtu

[PATCH AUTOSEL for 4.4 02/32] ARM: OMAP2+: gpmc-onenand: propagate error on initialization failure

2017-11-29 Thread alexander . levin
From: Ladislav Michl [ Upstream commit 7807e086a2d1f69cc1a57958cac04fea79fc2112 ] gpmc_probe_onenand_child returns success even on gpmc_onenand_init failure. Fix that. Signed-off-by: Ladislav Michl Acked-by: Roger Quadros Signed-off-by: Tony Lindgren Signed-off-by: Sasha Levin --- arch/arm

Re: [PATCH 4.14 000/193] 4.14.3-stable review

2017-11-29 Thread Greg Kroah-Hartman
On Wed, Nov 29, 2017 at 05:04:34PM +0100, Zdenek Kaspar wrote: > On 11/28/2017 11:24 AM, Greg Kroah-Hartman wrote: > > This is the start of the stable review cycle for the 4.14.3 release. > > There are 193 patches in this series, all will be posted as a response > > to this one. If anyone has any

Re: [PATCH v2 1/2] pinctrl: Allow a device to indicate when to force a state

2017-11-29 Thread Tony Lindgren
* Florian Fainelli [171129 17:37]: > On 11/29/2017 09:01 AM, Tony Lindgren wrote: > > * Florian Fainelli [171102 23:18]: > >> It may happen that a device needs to force applying a state, e.g: > >> because it only defines one state of pin states (default) but loses > >> power/register contents whe

[PATCH AUTOSEL for 4.9 51/52] powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested

2017-11-29 Thread alexander . levin
From: Alexey Kardashevskiy [ Upstream commit 7aafac11e308d37ed3c509829bb43d80c1811ac3 ] The IODA2 specification says that a 64 DMA address cannot use top 4 bits (3 are reserved and one is a "TVE select"); bottom page_shift bits cannot be used for multilevel table addressing either. The existing

[PATCH AUTOSEL for 4.9 50/52] drm/amd/amdgpu: fix console deadlock if late init failed

2017-11-29 Thread alexander . levin
From: Jim Qu [ Upstream commit c085bd5119d5d0bdf3ef591a5563566be7dedced ] Signed-off-by: Jim Qu Reviewed-by: Alex Deucher Signed-off-by: Alex Deucher Signed-off-by: Sasha Levin --- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 5 - 1 file changed, 4 insertions(+), 1 deletion(-) diff --g

[PATCH AUTOSEL for 4.9 46/52] blk-mq: initialize mq kobjects in blk_mq_init_allocated_queue()

2017-11-29 Thread alexander . levin
From: Ming Lei [ Upstream commit 737f98cfe7de8df7433a4d846850aa8efa44bd48 ] Both q->mq_kobj and sw queues' kobjects should have been initialized once, instead of doing that each add_disk context. Also this patch removes clearing of ctx in blk_mq_init_cpu_queues() because percpu allocator fills

[PATCH AUTOSEL for 4.9 10/52] powerpc: Fix compiling a BE kernel with a powerpc64le toolchain

2017-11-29 Thread alexander . levin
From: Nicholas Piggin [ Upstream commit 4dc831aa88132f835cefe876aa0206977c4d7710 ] GCC can compile with either endian, but the default ABI version is set based on the default endianness of the toolchain. Alan Modra says: you need both -mbig and -mabi=elfv1 to make a powerpc64le gcc generate

[PATCH AUTOSEL for 4.9 44/52] crypto: s5p-sss - Fix completing crypto request in IRQ handler

2017-11-29 Thread alexander . levin
From: Krzysztof Kozlowski [ Upstream commit 07de4bc88ce6a4d898cad9aa4c99c1df7e87702d ] In a regular interrupt handler driver was finishing the crypt/decrypt request by calling complete on crypto request. This is disallowed since converting to skcipher in commit b286d8b1a690 ("crypto: skcipher -

Re: [PATCH 2/2] fs, elf: drop MAP_FIXED usage from elf_map

2017-11-29 Thread Khalid Aziz
On 11/29/2017 07:42 AM, Michal Hocko wrote: From: Michal Hocko Both load_elf_interp and load_elf_binary rely on elf_map to map segments on a controlled address and they use MAP_FIXED to enforce that. This is however dangerous thing prone to silent data corruption which can be even exploitable.

[PATCH AUTOSEL for 4.9 43/52] ipv6: reorder icmpv6_init() and ip6_mr_init()

2017-11-29 Thread alexander . levin
From: WANG Cong [ Upstream commit 15e668070a64bb97f102ad9cf3bccbca0545cda8 ] Andrey reported the following kernel crash: kasan: GPF could be caused by NULL-ptr deref or user memory access general protection fault: [#1] SMP KASAN Dumping ftrace buffer: (ftrace buffer empty) Modules linke

[PATCH AUTOSEL for 4.9 42/52] ibmvnic: Allocate number of rx/tx buffers agreed on by firmware

2017-11-29 Thread alexander . levin
From: Thomas Falcon [ Upstream commit 068d9f90a6978c3e3a662d9e85204a7d6be240d2 ] The amount of TX/RX buffers that the vNIC driver currently allocates is different from the amount agreed upon in negotiation with firmware. Correct that by allocating the requested number of buffers confirmed by fir

[PATCH AUTOSEL for 4.9 13/52] powerpc/64: Fix checksum folding in csum_add()

2017-11-29 Thread alexander . levin
From: Shile Zhang [ Upstream commit 6ad966d7303b70165228dba1ee8da1a05c10eefe ] Paul's patch to fix checksum folding, commit b492f7e4e07a ("powerpc/64: Fix checksum folding in csum_tcpudp_nofold and ip_fast_csum_nofold") missed a case in csum_add(). Fix it. Signed-off-by: Shile Zhang Acked-by:

[PATCH AUTOSEL for 4.9 45/52] i2c: riic: fix restart condition

2017-11-29 Thread alexander . levin
From: Chris Brandt [ Upstream commit 2501c1bb054290679baad0ff7f4f07c714251f4c ] While modifying the driver to use the STOP interrupt, the completion of the intermediate transfers need to wake the driver back up in order to initiate the next transfer (restart condition). Otherwise you get never e

[PATCH AUTOSEL for 4.9 12/52] module: set __jump_table alignment to 8

2017-11-29 Thread alexander . levin
From: David Daney [ Upstream commit ab42632156becd35d3884ee5c14da2bedbf3149a ] For powerpc the __jump_table section in modules is not aligned, this causes a WARN_ON() splat when loading a module containing a __jump_table. Strict alignment became necessary with commit 3821fd35b58d ("jump_label:

[PATCH AUTOSEL for 4.9 40/52] rds: tcp: Sequence teardown of listen and acceptor sockets to avoid races

2017-11-29 Thread alexander . levin
From: Sowmini Varadhan [ Upstream commit b21dd4506b71bdb9c5a20e759255cd2513ea7ebe ] Commit a93d01f5777e ("RDS: TCP: avoid bad page reference in rds_tcp_listen_data_ready") added the function rds_tcp_listen_sock_def_readable() to handle the case when a partially set-up acceptor socket drops into

[PATCH AUTOSEL for 4.9 38/52] bnx2x: fix detection of VLAN filtering feature for VF

2017-11-29 Thread alexander . levin
From: Michal Schmidt [ Upstream commit 83bd9eb8fc69cdd5135ed6e1f066adc8841800fd ] VFs are currently missing the VLAN filtering feature, because we were checking the PF's acquire response before actually performing the acquire. Fix it by setting the feature flag later when we have the PF respons

[PATCH AUTOSEL for 4.9 39/52] bnx2x: do not rollback VF MAC/VLAN filters we did not configure

2017-11-29 Thread alexander . levin
From: Michal Schmidt [ Upstream commit 78d5505432436516456c12abbe705ec8dee7ee2b ] On failure to configure a VF MAC/VLAN filter we should not attempt to rollback filters that we failed to configure with -EEXIST. Signed-off-by: Michal Schmidt Signed-off-by: David S. Miller Signed-off-by: Sasha

[PATCH AUTOSEL for 4.9 37/52] bnx2x: fix possible overrun of VFPF multicast addresses array

2017-11-29 Thread alexander . levin
From: Michal Schmidt [ Upstream commit 22118d861cec5da6ed525aaf12a3de9bfeffc58f ] It is too late to check for the limit of the number of VF multicast addresses after they have already been copied to the req->multicast[] array, possibly overflowing it. Do the check before copying. Also fix the

Re: [PATCHv2 0/4] x86: 5-level related changes into decompression code

2017-11-29 Thread Borislav Petkov
On Wed, Nov 29, 2017 at 08:08:31PM +0300, Kirill A. Shutemov wrote: > We're really early in the boot -- startup_64 in decompression code -- and > I don't know a way print a message there. Is there a way? > > no_longmode handled by just hanging the machine. Is it enough for no_la57 > case too? Pat

[PATCH AUTOSEL for 4.9 14/52] ARM: OMAP2+: Fix device node reference counts

2017-11-29 Thread alexander . levin
From: Guenter Roeck [ Upstream commit 10e5778f54765c96fe0c8f104b7a030e5b35bc72 ] After commit 0549bde0fcb1 ("of: fix of_node leak caused in of_find_node_opts_by_path"), the following error may be reported when running omap images. OF: ERROR: Bad of_node_put() on /ocp@6800 CPU: 0 PID: 0 Comm

[PATCH AUTOSEL for 4.9 27/52] scsi: qla2xxx: Fix ql_dump_buffer

2017-11-29 Thread alexander . levin
From: Joe Perches [ Upstream commit 23456565acf6d452e0368f7380aecd584c019c67 ] Recent printk changes for KERN_CONT cause this logging to be defectively emitted on multiple lines. Fix it. Also reduces object size a trivial amount. $ size drivers/scsi/qla2xxx/qla_dbg.o* textdata bss

[PATCH AUTOSEL for 4.9 36/52] bnx2x: prevent crash when accessing PTP with interface down

2017-11-29 Thread alexander . levin
From: Michal Schmidt [ Upstream commit 466e8bf10ac104d96e1ea813e8126e11cb72ea20 ] It is possible to crash the kernel by accessing a PTP device while its associated bnx2x interface is down. Before the interface is brought up, the timecounter is not initialized, so accessing it results in NULL der

[PATCH AUTOSEL for 4.9 18/52] HID: chicony: Add support for another ASUS Zen AiO keyboard

2017-11-29 Thread alexander . levin
From: Daniel Drake [ Upstream commit f2f10b7e722a75c6d75a7f7cd06b0eee3ae20f7c ] Add support for media keys on the keyboard that comes with the Asus V221ID and ZN241IC All In One computers. The keys to support here are WLAN, BRIGHTNESSDOWN and BRIGHTNESSUP. This device is not visibly branded as

[PATCH AUTOSEL for 4.9 34/52] spi_ks8995: fix "BUG: key accdaa28 not in .data!"

2017-11-29 Thread alexander . levin
From: "Blomme, Maarten" [ Upstream commit 4342696df764ec65dcdfbd0c10d90ea52505f8ba ] Signed-off-by: Maarten Blomme Signed-off-by: David S. Miller Signed-off-by: Sasha Levin --- drivers/net/phy/spi_ks8995.c | 1 + 1 file changed, 1 insertion(+) diff --git a/drivers/net/phy/spi_ks8995.c b/dri

[PATCH AUTOSEL for 4.9 20/52] USB: gadgetfs: Fix a potential memory leak in 'dev_config()'

2017-11-29 Thread alexander . levin
From: Christophe JAILLET [ Upstream commit b6e7aeeaf235901c42ec35de4633c7c69501d303 ] 'kbuf' is allocated just a few lines above using 'memdup_user()'. If the 'if (dev->buf)' test fails, this memory is never released. Signed-off-by: Christophe JAILLET Signed-off-by: Felipe Balbi Signed-off-by

[PATCH AUTOSEL for 4.9 33/52] KVM: arm/arm64: VGIC: Fix command handling while ITS being disabled

2017-11-29 Thread alexander . levin
From: Andre Przywara [ Upstream commit a5e1e6ca94a8cec51571fd62e3eaec269717969c ] The ITS spec says that ITS commands are only processed when the ITS is enabled (section 8.19.4, Enabled, bit[0]). Our emulation was not taking this into account. Fix this by checking the enabled state before handli

[PATCH AUTOSEL for 4.9 32/52] arm64: KVM: Survive unknown traps from guests

2017-11-29 Thread alexander . levin
From: Mark Rutland [ Upstream commit ba4dd156eabdca93501d92a980ba27fa5f4bbd27 ] Currently we BUG() if we see an ESR_EL2.EC value we don't recognise. As configurable disables/enables are added to the architecture (controlled by RES1/RES0 bits respectively), with associated synchronous exceptions,

[PATCH AUTOSEL for 4.9 23/52] usb: gadget: udc: net2280: Fix tmp reusage in net2280 driver

2017-11-29 Thread alexander . levin
From: Raz Manor [ Upstream commit ef5e2fa9f65befa12f1113c734602d2c1964d2a5 ] In the function scan_dma_completions() there is a reusage of tmp variable. That coused a wrong value being used in some case when reading a short packet terminated transaction from an endpoint, in 2 concecutive reads.

Re: [PATCH] jsm_tty: Fix a possible null pointer dereference in two functions

2017-11-29 Thread Joe Perches
On Wed, 2017-11-29 at 17:35 +, Greg Kroah-Hartman wrote: > On Wed, Nov 29, 2017 at 09:23:07AM -0800, Joe Perches wrote: > > On Wed, 2017-11-29 at 17:40 +0100, SF Markus Elfring wrote: > > > From: Markus Elfring > > > Date: Wed, 29 Nov 2017 17:30:36 +0100 > > > > > > Move two debug messages so

[PATCH AUTOSEL for 4.9 26/52] workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq

2017-11-29 Thread alexander . levin
From: Tejun Heo [ Upstream commit 637fdbae60d6cb9f6e963c1079d7e0445c86ff7d ] If queue_delayed_work() gets called with NULL @wq, the kernel will oops asynchronuosly on timer expiration which isn't too helpful in tracking down the offender. This actually happened with smc. __queue_delayed_work()

[PATCH AUTOSEL for 4.9 29/52] irqchip/crossbar: Fix incorrect type of register size

2017-11-29 Thread alexander . levin
From: Franck Demathieu [ Upstream commit 4b9de5da7e120c7f02395da729f0ec77ce7a6044 ] The 'size' variable is unsigned according to the dt-bindings. As this variable is used as integer in other places, create a new variable that allows to fix the following sparse issue (-Wtypesign): drivers/irqc

[PATCH AUTOSEL for 4.9 25/52] libata: drop WARN from protocol error in ata_sff_qc_issue()

2017-11-29 Thread alexander . levin
From: Tejun Heo [ Upstream commit 0580b762a4d6b70817476b90042813f8573283fa ] ata_sff_qc_issue() expects upper layers to never issue commands on a command protocol that it doesn't implement. While the assumption holds fine with the usual IO path, nothing filters based on the command protocol in

[PATCH AUTOSEL for 4.9 19/52] usb: gadget: configs: plug memory leak

2017-11-29 Thread alexander . levin
From: John Keeping [ Upstream commit 38355b2a44776c25b0f2ad466e8c51bb805b3032 ] When binding a gadget to a device, "name" is stored in gi->udc_name, but this does not happen when unregistering and the string is leaked. Signed-off-by: John Keeping Signed-off-by: Felipe Balbi Signed-off-by: Sas

[PATCH AUTOSEL for 4.9 22/52] usb: gadget: pxa27x: Test for a valid argument pointer

2017-11-29 Thread alexander . levin
From: Petr Cvek [ Upstream commit df7545719a14fa7b481896fb8689e23d0a00f682 ] A call usb_put_phy(udc->transceiver) must be tested for a valid pointer. Use an already existing test for usb_unregister_notifier call. Acked-by: Robert Jarzmik Reported-by: Robert Jarzmik Signed-off-by: Petr Cvek S

[PATCH AUTOSEL for 4.9 21/52] usb: dwc3: gadget: Fix system suspend/resume on TI platforms

2017-11-29 Thread alexander . levin
From: Roger Quadros [ Upstream commit 1551e35ea4189c1f7199fe278395fc94196715f2 ] On TI platforms (dra7, am437x), the DWC3_DSTS_DEVCTRLHLT bit is not set after the device controller is stopped via DWC3_DCTL_RUN_STOP. If we don't disconnect and stop the gadget, it stops working after a system res

[PATCH AUTOSEL for 4.9 16/52] ASoC: rcar: avoid SSI_MODEx settings for SSI8

2017-11-29 Thread alexander . levin
From: Kuninori Morimoto [ Upstream commit 4b30eebfc35c67771b5f58d9274d3e321b72d7a8 ] SSI8 is is sharing pin with SSI7, and nothing to do for SSI_MODEx. It is special pin and it needs special settings whole system, but we can't confirm it, because we never have SSI8 available board. This patch f

[PATCH AUTOSEL for 4.9 06/52] sched/fair: Make select_idle_cpu() more aggressive

2017-11-29 Thread alexander . levin
From: Peter Zijlstra [ Upstream commit 4c77b18cf8b7ab37c7d5737b4609010d2ceec5f0 ] Kitsunyan reported desktop latency issues on his Celeron 887 because of commit: 1b568f0aabf2 ("sched/core: Optimize SCHED_SMT") ... even though his CPU doesn't do SMT. The effect of running the SMT code on a !

Re: [pcpu] BUG: KASAN: use-after-scope in pcpu_setup_first_chunk+0x1e3b/0x29e2

2017-11-29 Thread Dennis Zhou
Hi everyone, I spent a bit of time learning more about this problem as Fengguang was able to determine the root commit f7dd2507893cc3. I reproduced the bug in userspace to make life a bit easier and below the assignment occurs before the unpoison. This is fine if we're sequentially proceeding, but

[PATCH AUTOSEL for 4.9 02/52] vti6: Don't report path MTU below IPV6_MIN_MTU.

2017-11-29 Thread alexander . levin
From: Steffen Klassert [ Upstream commit e3dc847a5f85b43ee2bfc8eae407a7e383483228 ] In vti6_xmit(), the check for IPV6_MIN_MTU before we send a ICMPV6_PKT_TOOBIG message is missing. So we might report a PMTU below 1280. Fix this by adding the required check. Fixes: ccd740cbc6e ("vti6: Add pmtu

[PATCH AUTOSEL for 4.9 07/52] x86/hpet: Prevent might sleep splat on resume

2017-11-29 Thread alexander . levin
From: Thomas Gleixner [ Upstream commit bb1a2c26165640ba2cbcfe06c81e9f9d6db4e643 ] Sergey reported a might sleep warning triggered from the hpet resume path. It's caused by the call to disable_irq() from interrupt disabled context. The problem with the low level resume code is that it is not ac

[PATCH AUTOSEL for 4.9 05/52] x86/platform/uv/BAU: Fix HUB errors by remove initial write to sw-ack register

2017-11-29 Thread alexander . levin
From: Andrew Banman [ Upstream commit 1b17c6df852851b40c3c27c66b8fa2fd99cf25d8 ] Writing to the software acknowledge clear register when there are no pending messages causes a HUB error to assert. The original intent of this write was to clear the pending bits before start of operation, but this

[PATCH AUTOSEL for 4.9 11/52] [media] lirc: fix dead lock between open and wakeup_filter

2017-11-29 Thread alexander . levin
From: Sean Young [ Upstream commit db5b15b74ed9a5c04bb808d18ffa2c773f5c18c0 ] The locking in lirc needs improvement, but for now just fix this potential deadlock. == [ INFO: possible circular locking dependency detected ] 4.10.0-rc1+ #1 Not ta

[PATCH AUTOSEL for 4.9 01/52] ARM: 8657/1: uaccess: consistently check object sizes

2017-11-29 Thread alexander . levin
From: Kees Cook [ Upstream commit 32b143637e8180f5d5cea54320c769210dea4f19 ] In commit 76624175dcae ("arm64: uaccess: consistently check object sizes"), the object size checks are moved outside the access_ok() so that bad destinations are detected before hitting the "memset(dest, 0, size)" in th

[PATCH AUTOSEL for 4.9 04/52] x86/selftests: Add clobbers for int80 on x86_64

2017-11-29 Thread alexander . levin
From: Dmitry Safonov [ Upstream commit 2a4d0c627f5374f365a873dea4e10ae0bb437680 ] Kernel erases R8..R11 registers prior returning to userspace from int80: https://lkml.org/lkml/2009/10/1/164 GCC can reuse these registers and doesn't expect them to change during syscall invocation. I met this

[PATCH 3/7] ntb_hw_switchtec: Create helper function to setup reserved LUT MWs

2017-11-29 Thread Logan Gunthorpe
This is a prep patch in order to support the crosslink feature which will require the driver to use another reserved LUT window. To simplify this we move the code which sets up the reserved LUT window into a helper function which will be used by the crosslink initialization. Signed-off-by: Logan G

[PATCH 7/7] ntb_hw_switchtec: Crosslink doorbells and messages

2017-11-29 Thread Logan Gunthorpe
In a crosslink configuration doorbells and messages largely work the same but the NTB registers must be accessed through the reserved LUT window. Also, as a bonus, seeing there are now two independent sets of NTB links, both partitions can actually use all 60 doorbell registers instead of them havi

[PATCH 2/7] ntb_hw_switchtec: Keep track of the number of LUT windows used by the driver

2017-11-29 Thread Logan Gunthorpe
This is a prep patch in order to support the crosslink feature which will require the driver to use another reserved LUT window. To simplify this, we add some code to track the number of reserved LUT windows in use instead of assuming this is always 1. Signed-off-by: Logan Gunthorpe --- drivers/

[PATCH 5/7] ntb_hw_switchtec: Expand PFF CSR registers

2017-11-29 Thread Logan Gunthorpe
The PFF CSR registers actual mirrors the PCI configuration space for all the ports in the switch. Previously, this was not needed by the driver but will be used by the crosslink code to enumerate the bus in an host-less centre partition. Signed-off-by: Logan Gunthorpe --- include/linux/switchtec

[PATCH 6/7] ntb_hw_switchtec: Add initialization code for crosslink

2017-11-29 Thread Logan Gunthorpe
Crosslink is a feature of the Switchtec switches that is similar to the B2B mode of other NTB devices. It allows a system to be designed that is perfectly symmetric with two identical switches that link two hosts together. In order for the system to be symmetric, there is an empty host-less partit

PI futexes + lock stealing woes

2017-11-29 Thread Julia Cartwright
Hey Thomas, Peter- Gratian and I have been debugging into a nasty and difficult race w/ futexes seemingly the culprit. The original symptom we were seeing was a seemingly spurious -EDEADLK from a futex(LOCK_PI) operation. On further analysis, however, it appears the thread which gets the spuriou

[PATCH 0/7] Switchtec NTB Crosslink Support

2017-11-29 Thread Logan Gunthorpe
Hi, This patch series adds support for the Switchtec Crosslink feature. Crosslink is similar to B2B in that it allows two switches to be connected back to back. Two switches can already be connected between two hosts, however with this setup, there would be no symmetry as one switch would handle

Re: [PATCHv2 2/2] userns: control capabilities of some user namespaces

2017-11-29 Thread Serge E. Hallyn
Quoting Mahesh Bandewar (महेश बंडेवार) (mahe...@google.com): > On Tue, Nov 28, 2017 at 3:04 PM, Serge E. Hallyn wrote: > > Quoting Mahesh Bandewar (महेश बंडेवार) (mahe...@google.com): > > ... > >> >> diff --git a/security/commoncap.c b/security/commoncap.c > >> >> index fc46f5b85251..89103f16ac37

Re: [PATCH v2] tpm: return a TPM_RC_COMMAND_CODE response if a command isn't implemented

2017-11-29 Thread Jarkko Sakkinen
On Wed, Nov 29, 2017 at 12:08:46PM +0100, Javier Martinez Canillas wrote: > +#define TPM2_RC_LAYER_SHIFT 16 > +#define TPM2_RESMGRTPM_RC_LAYER (11 << TPM2_RC_LAYER_SHIFT) I got this spec from Philip [1]. Couple of remarks: * What is the difference between TSS2_RESMGR_RC_LAYER and TSS2_RESMGR_

Re: [PATCH v2 1/2] ARM: dts: exynos: Switch to dedicated Odroid-XU3 sound card binding

2017-11-29 Thread Krzysztof Kozlowski
On Mon, Nov 27, 2017 at 7:12 PM, Krzysztof Kozlowski wrote: > On Fri, Nov 03, 2017 at 05:54:45PM +0100, Sylwester Nawrocki wrote: >> The new sound card DT binding is used for Odroid XU3 in order >> to properly support the HDMI audio path. >> Clocks configuration is changed so the I2S controller is

[PATCH AUTOSEL for 4.9 08/52] powerpc/64: Invalidate process table caching after setting process table

2017-11-29 Thread alexander . levin
From: Paul Mackerras [ Upstream commit 7a70d7288c926ae88e0c773fbb506aa374e99c2d ] The POWER9 MMU reads and caches entries from the process table. When we kexec from one kernel to another, the second kernel sets its process table pointer but doesn't currently do anything to make the CPU invalidat

Re: [PATCH 0/7] Switchtec NTB Crosslink Support

2017-11-29 Thread Logan Gunthorpe
Also, I forgot to mention, this patch set is based on today's ntb-next. Logan On 29/11/17 10:55 AM, Logan Gunthorpe wrote: Hi, This patch series adds support for the Switchtec Crosslink feature. Crosslink is similar to B2B in that it allows two switches to be connected back to back. Two switc

[PATCH 4/7] ntb_hw_switchtec: Make switchtec_ntb_init_req_id_table() more general

2017-11-29 Thread Logan Gunthorpe
This is a prep patch in order to support the crosslink feature which will require the driver to setup the requester ID table in another partition as well as it's own. To aid this, create a helper function which sets up the requester IDs from an array. Signed-off-by: Logan Gunthorpe --- drivers/n

[PATCH 1/7] ntb_hw_switchtec: Allow using Switchtec NTB in multi-partition setups

2017-11-29 Thread Logan Gunthorpe
From: Kelvin Cao Allow using Switchtec NTB in setups that have more than two partitions. Note: this does not enable having multi-host communication, it only allows for a single NTB link between two hosts in a network that might have more than two. Use following logic to determine the NT peer par

Re: Documentation patch for namespaced file capabilities

2017-11-29 Thread Serge E. Hallyn
Quoting Michael Kerrisk (man-pages) (mtk.manpa...@gmail.com): > Hi Serge, > > At the moment man-pages lacks documentation of the namespaced file > capability feature that you added with commit > 8db6c34f1dbc8e06aa016a9b829b06902c3e1340. Would you be able to send a > patch describing the feature?

Re: [PATCH] x86/entry/64: Fix native_load_gs_index() SWAPGS handling with IRQ state tracing enabled

2017-11-29 Thread Andy Lutomirski
On Tue, Nov 28, 2017 at 11:09 PM, Ingo Molnar wrote: > > * Jarkko Nikula wrote: > >> Hi >> >> Suspend-to-ram and resume stopped working on v4.15-rc1 and I bisected it to >> commit ca37e57bbe0c ("x86/entry/64: Add missing irqflags tracing to >> native_load_gs_index()"). >> >> I noticed it on Intel

[PATCH AUTOSEL for 4.9 09/52] selftest/powerpc: Fix false failures for skipped tests

2017-11-29 Thread alexander . levin
From: Sachin Sant [ Upstream commit a6d8a21596df041f36f4c2ccc260c459e3e851f1 ] Tests under alignment subdirectory are skipped when executed on previous generation hardware, but harness still marks them as failed. test: test_copy_unaligned tags: git_version:unknown [SKIP] Test skipped on l

[PATCH AUTOSEL for 4.9 03/52] ARM: OMAP2+: gpmc-onenand: propagate error on initialization failure

2017-11-29 Thread alexander . levin
From: Ladislav Michl [ Upstream commit 7807e086a2d1f69cc1a57958cac04fea79fc2112 ] gpmc_probe_onenand_child returns success even on gpmc_onenand_init failure. Fix that. Signed-off-by: Ladislav Michl Acked-by: Roger Quadros Signed-off-by: Tony Lindgren Signed-off-by: Sasha Levin --- arch/arm

Re: [PATCH] x86/entry/64: Fix native_load_gs_index() SWAPGS handling with IRQ state tracing enabled

2017-11-29 Thread Peter Zijlstra
On Wed, Nov 29, 2017 at 09:57:43AM -0800, Andy Lutomirski wrote: > On Tue, Nov 28, 2017 at 11:09 PM, Ingo Molnar wrote: > > On a related note, we should definitely extend the 'intended GS state' > > annotation > > comments I did in this patch to all SWAPGS instances - this way code review > > h

<    3   4   5   6   7   8   9   10   11   12   >